I am having a problem to insert data into database using laravel

Question

I am having an issue regarding post route in laravel. Everytime i try to post data into my model, I get a 419 error i.e my session has been expired. What would be the solution to this problem?

public function store(Request $request)
{
    $this->validate($request, [
        'title' => 'required',
        'body'  => 'required',
    ]);

    $post = new Post;
    $post->title = $request->input('title');
    $post->body = $request->input('body');
    $post->save();

    return redirect('/posts')->with('success', 'Post created');
}

Following is the blade code

{!! Form::open(['action' => 'postsController@store', 'method' => 'POST']) !!}

    <div class='form-group'>
        {{ Form::label('title','Title') }}
        {{ Form::text('title','',['class'=>'form-control','placeholder'=>'Title']) }}
    </div>

    <div class='form-group'>
        {{ Form::label('body','Body') }}
        {{ Form::textarea('body','',['id'=>'article-ckeditor','class'=>'form-control','placeholder'=>'Body Text']) }}
    </div>

    {{ Form::submit('Submit',['class'=>'btn btn-primary']) }}

{!! Form::close() !!}

Martin Heralecký · Accepted Answer · 2018-11-21 20:42:33Z

6

Add a CSRF field to the form:

{!! csrf_field() !!}

VerifyCsrfToken middleware (which is defaultly included in Laravel app) requires that each POST request contains a pre-generated CSRF token. This increases security (see CSRF Wiki page). If you want to disable this, you can either delete/stop using the VerifyCsrfToken middleware, or you can list URIs that should be excluded from CSRF verification (see documentation).

edited Nov 21, 2018 at 20:42

answered Nov 21, 2018 at 19:47

Martin Heralecký

5,8194 gold badges32 silver badges68 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

Martin Heralecký Over a year ago

@NicoHaase Because Laravel defaultly needs every POST request to have this csrf-token, which increases security. The code responsible for this is in the VerifyCsrfToken middleware.

Nico Haase Over a year ago

If this is an absolute need, it would be good if you'd add that to your answer

aynber Over a year ago

It should automatically do this, or at least it used to.

Tim Lewis Over a year ago

@aynber Maybe it used to, but I've been working with Laravel since 4.2, and I've always had to manually include the csrf token in POST forms.

Kenny Horna Over a year ago

@aynber no, Laravel doens't include it by default. It generates it but you must include it in the form adding a hidden CSRF token field, so that the CSRF protection middleware can validate the request. The other option is to disable the CSRF Verification from the desired endpoint.

Collectives™ on Stack Overflow

I am having a problem to insert data into database using laravel

1 Answer 1

5 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

5 Comments

Your Answer

Sign up or log in

Post as a guest

Related